CVE-2026-47558

A flaw was found in the NVIDIA GPU display driver. An unprivileged local user can exploit this vulnerability by triggering a double-free memory management error—releasing the same memory block twice—within the kernel-mode layer while handling imported memory states. A successful exploit could all...

CVE-2026-47550

A flaw was found in the NVIDIA GPU display driver. The kernel mode layer fails to properly validate user-supplied memory pointers before dereferencing them. A local attacker with low privileges can exploit this issue by submitting a crafted pointer, potentially leading to arbitrary code execution...

CVE-2026-47548

A flaw was found in the NVIDIA GPU display driver. A local user can exploit an out-of-bounds write vulnerability within the kernel mode layer to corrupt system memory. Successful exploitation could allow an attacker to achieve arbitrary code execution with elevated kernel privileges, trigger a...

CVE-2026-47545

A flaw was found in the NVIDIA GPU Display Driver. A local user with basic privileges can exploit an out-of-bounds read vulnerability in the driver's kernel-mode layer. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges, access or tamper with sensitiv...

CVE-2026-47540

A flaw was found in the NVIDIA GPU Display Driver. An integer underflow vulnerability exists in the driver's kernel mode layer, occurring when an arithmetic calculation results in a value smaller than the minimum representable limit. A local attacker with low-level privileges can exploit this fla...

CVE-2026-47530

A flaw was found in nvidia-driver. A local user with standard privileges can trigger an out-of-bounds memory write within the driver's kernel-mode layer. Successful exploitation could allow an attacker to execute arbitrary code, escalate privileges, tamper with sensitive data, or cause a denial o...

LocalStranger

LocalStranger LocalStranger — это проект Proof of Concept , созданный для демонстрации того, насколько опасным на самом деле может быть уязвимый драйвер режима ядра. WinNotify.sys как я его называю, msft.sys — это очень опасный уязвимый драйвер, предоставляющий произвольные примитивы уровня ядра...

CVE-2026-47524

A flaw was found in the NVIDIA GPU display driver. A local attacker with high privileges can trigger an out-of-bounds read in the kernel mode layer. Successful exploitation could lead to arbitrary code execution, privilege escalation, a Denial of Service DoS, or information disclosure...

CVE-2026-47604

A flaw was found in the NVIDIA GPU display driver. Missing authorization checks in the kernel-mode driver allow a local user to access another process's graphics processing unit GPU channel state. Successful exploitation can lead to unauthorized information disclosure...

CVE-2026-47566

A flaw was found in nvidia-driver. An unprivileged local attacker can trigger specific error-handling routines in the kernel-mode driver layer, causing memory to leak instead of being freed. Over time, this memory exhaustion can destabilize the operating system and result in a Denial of Service...

CVE-2026-47531

A flaw was found in the NVIDIA GPU Display Driver. A local attacker with high privileges can trigger an invalid memory access null pointer dereference within the kernel mode layer. Successful exploitation leads to a Denial of Service DoS by causing the driver or host system to crash...

CVE-2026-47537

A flaw was found in the NVIDIA GPU display driver. An out-of-bounds write vulnerability in the kernel mode layer allows a local privileged attacker to corrupt system memory. Successful exploitation can lead to arbitrary code execution, privilege escalation, or a Denial of Service DoS, as well as...

CVE-2026-47513

A flaw was found in the NVIDIA GPU display driver nvidia-driver. A vulnerability in the kernel mode layer allows a local user to trigger an out-of-bounds read from kernel heap memory. A successful exploit could enable an attacker to achieve arbitrary code execution, escalate privileges, cause a...

CVE-2026-47592

A flaw was found in nvidia-driver. An out-of-bounds read vulnerability in the kernel mode layer allows a local, unprivileged user to access memory outside of intended boundaries. Successful exploitation may result in arbitrary code execution, privilege escalation, denial of service DoS, or...

CVE-2026-47569

A flaw was found in the NVIDIA GPU display driver. A local user can trigger a race condition during handle recycling in the kernel mode layer, resulting in a type confusion condition where memory of one type is misinterpreted as another. A successful exploit could allow an attacker to achieve...

CVE-2026-47551

A flaw was found in the NVIDIA GPU Display Driver. A local user can trigger a use-after-free condition in the kernel-mode driver layer, where previously freed memory is improperly referenced. A successful exploit could allow an attacker to achieve arbitrary code execution, escalate privileges,...

CVE-2026-47560

A flaw was found in the NVIDIA GPU Display Driver for Linux. An unprivileged local user can trigger a use-after-free condition in the kernel mode layer, allowing memory to be accessed after it has been released. A successful exploit could permit an attacker to achieve arbitrary code execution,...

CVE-2026-47514

A flaw was found in nvidia-driver. A local user can trigger an issue in the driver's kernel mode layer that exposes sensitive kernel stack contents, including return addresses and memory pointers. A successful exploit could allow an attacker to achieve arbitrary code execution, escalate privilege...

CVE-2026-47559

A flaw was found in the NVIDIA GPU display driver. A local user can exploit an issue in the driver's kernel mode layer to access memory belonging to another user's process. A successful exploit could allow an attacker to escalate privileges, execute arbitrary code, tamper with sensitive data, or...

DEBIAN-CVE-2026-47604

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure...